Hello Ben,

Friday, July 12, 2002, 5:26:37 PM, you wrote:

BK> Hi Hadad,
BK> I cannot see any reason why this would not be possible except...
BK> The proftpd daemon would require root privileges to bind to port 21.
BK> However, this then means that the 'admin' user on the VS could
BK> _possibly_ find a way to alter the proftpd config files such that they
BK> could run the command of their choice as root (not good).

In this way I can start proftpd with a call in /etc/rc file, so, the
proftp will start like root but could run with user and group nobody.
If the user want restart, he will have restart the virtual server... :-(
But... if user want run any proftpd command (like ftpwho), I don't
know how...  :-(

BK> You could use ipchains/iptables to counter balance this and get
BK> proftpd listening on a non-privileged port as a non-privileged user
BK> (using port redirection)

Like occurs with apache (80 -> 8080) in iptables?

BK> What other program are you planning to use on port 21? (just curious)

I need a machine to run a program called rinetd (to make redirects for
ips and ports: like some 200.200.200.200 80 300.300.300.300 81) because I need this 
for a project.
Well, I don't have more any fisical computer to do this, so, I
decided install rinetd inside a virtual server.
But rinetd not bind any ports if the server already bind the port.
Explain better: if I use rinetd to redirect port 80 to port 81, I
don't can use Apache (in this virtual server) in port 80, understand?
Well, I disable Apache, but now, I need redirect port 21 to other, and
I cannot do this because Proftpd alredy run in port 21...
Thanks for your attention.
-- 
Hadad                            mailto:[EMAIL PROTECTED]

------------------------- The freeVSD Support List --------------------------
Subscribe:   mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
Unsubscribe: mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
Archives:    http://freevsd.org/support/mail-archives/freevsd-support
-----------------------------------------------------------------------------

Reply via email to